CVE-2026-47491
Quick assessment
Affected
NVIDIA GeForce
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
NVIDIA Linux GPU 显示驱动程序在内核模式层中存在一个漏洞，非特权用户可触发内存资源的不当释放，导致底层内存被重用后，其映射仍然保持可访问状态。成功利用此漏洞可能导致代码执行、拒绝服务、权限提升、信息泄露以及数据篡改等后果。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1068 · Exploitation for Privilege Escalation
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-47491
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can cause improper release of memory resources, leaving a mapping accessible after the underlying memory is reused. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data tampering.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
不恰当的资源关闭或释放
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| NVIDIA | GeForce | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | GeForce | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | RTX, Quadro, NVS | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | Tesla | All driver versions prior to 615.71.09 | - |
|
| NVIDIA | Tesla | All driver versions prior to 610.57.04 | - |
|
| NVIDIA | Tesla | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | Tesla | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | GeForce | All driver versions prior to 595.91.07 | - |
|
| NVIDIA | GeForce | All driver versions prior to 580.178.04 | - |
|
| NVIDIA | Guest driver | 595.71.05(All versions prior to and including vGPU 20.1) | - |
|
| NVIDIA | Guest driver | 580.159.03(All versions prior to and including vGPU 19.5) | - |
|
II. Public POCs for CVE-2026-47491
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-47491
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-47491 (2)
Other References for CVE-2026-47491 (1)
Same Patch Batch · NVIDIA · 2026-09-30 · 114 CVEs total
| CVE-2026-47578 | 7.8 HIGH | NVIDIA Windows驱动内核缓冲区计算错误致代码执行 |
| CVE-2026-47550 | 7.8 HIGH | NVIDIA Windows驱动内核空指针解引用漏洞 |
| CVE-2026-47551 | 7.8 HIGH | NVIDIA驱动内核层释放后使用漏洞 |
| CVE-2026-47552 | 7.8 HIGH | NVIDIA Linux驱动内核层越权漏洞 |
| CVE-2026-47553 | 7.8 HIGH | NVIDIA驱动越界写漏洞致代码执行及权限提升 |
| CVE-2026-47556 | 7.8 HIGH | NVIDIA驱动整数溢出致越界写漏洞 |
| CVE-2026-47558 | 7.8 HIGH | NVIDIA Linux驱动内核层双重释放漏洞 |
| CVE-2026-47559 | 7.8 HIGH | NVIDIA驱动内核层越界访问致代码执行漏洞 |
| CVE-2026-47560 | 7.8 HIGH | NVIDIA Linux驱动内核层释放后使用漏洞 |
| CVE-2026-47561 | 7.8 HIGH | NVIDIA Linux驱动内核越界写漏洞 |
| CVE-2026-47563 | 7.8 HIGH | NVIDIA Linux驱动内核空指针解引用漏洞 |
| CVE-2026-47569 | 7.8 HIGH | NVIDIA Linux驱动内核层类型混淆漏洞 |
| CVE-2026-47570 | 7.8 HIGH | NVIDIA Windows驱动CUDA库加载路径漏洞 |
| CVE-2026-47571 | 7.8 HIGH | NVIDIA Windows驱动本地提权漏洞 |
| CVE-2026-47572 | 7.8 HIGH | NVIDIA Linux驱动内核层类型混淆漏洞 |
| CVE-2026-47573 | 7.8 HIGH | NVIDIA NVAPI Windows越界写漏洞 |
| CVE-2026-47575 | 7.8 HIGH | NVIDIA Windows驱动整数溢出致代码执行漏洞 |
| CVE-2026-47577 | 7.8 HIGH | NVIDIA Windows驱动内核模块比较错误漏洞 |
| CVE-2026-47593 | 7.8 HIGH | NVIDIA Windows驱动越界写致提权漏洞 |
| CVE-2026-47591 | 7.8 HIGH | NVIDIA Linux驱动内核层越权写漏洞 |
Showing top 20 of 114 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-404
-
CVE-2026-103241
vllm-project vLLM Gemma4UnifiedParser gemma4.rs denial of se -
CVE-2026-101040
Ricoh SP 330DN/SP 221/SP C252SF/Aficio SP 3500SF HTTP Multip -
CVE-2026-94137
Hangzhou Shunwang Technology shzh IRP_MJ_DEVICE_CONTROL shdr -
CVE-2026-94094
OpenClaw Canvas Host Route server.ts createCanvasHostHandler -
CVE-2026-91855
Open5GS PFCP Message handler.c denial of service
V. Comments for CVE-2026-47491
No comments yet